{"id":37,"date":"2015-04-11T15:01:00","date_gmt":"2015-04-11T15:01:00","guid":{"rendered":"https:\/\/www.tech-and-dev.com\/blog\/2015\/04\/11\/forwarding-ip-address-from-varnish-to-apache-on-ubuntu-centos\/"},"modified":"2021-02-22T01:03:50","modified_gmt":"2021-02-22T01:03:50","slug":"forwarding-ip-address-from-varnish-to-apache","status":"publish","type":"post","link":"https:\/\/www.tech-and-dev.com\/blog\/2015\/04\/forwarding-ip-address-from-varnish-to-apache.html","title":{"rendered":"Forwarding IP Address From Varnish to Apache On Ubuntu & CentOS"},"content":{"rendered":"
\n
\"Varnish<\/a><\/div>\n

 <\/p>\n

By default, varnish doesn’t forward the public IP of the visitor to the web server such as Apache or Nginx. This makes it harder to detect the visitors’ real IP and to read the log files since they will all be displaying the server’s IP.<\/div>\n
<\/div>\n
To fix this, Varnish has to be configured to forward the real IP to the webserver.<\/div>\n

<\/a><\/p>\n

Modify Configuration File:<\/h2>\n

Modify the Varnish \/etc\/varnish\/default.vcl file:<\/p>\n

vi \/etc\/varnish\/default.vcl<\/p><\/blockquote>\n

Add or un-comment the following:<\/p>\n

\u00a0sub vcl_recv {
\nif (req.restarts == 0) {
\nif (req.http.x-forwarded-for) {
\nset req.http.X-Forwarded-For =
\nreq.http.X-Forwarded-For + “, ” + client.ip;
\n} else {
\nset req.http.X-Forwarded-For = client.ip;
\n}
\n}
\n}<\/p><\/blockquote>\n

Install Apache mod-rpaf for Apache below 2.4<\/h2>\n

Install on Debian\/Ubuntu:<\/h3>\n

apt-get install libapache2-mod-rpaf<\/p><\/blockquote>\n

Enable mod-rpaf:<\/p>\n

a2enmod rpaf<\/p><\/blockquote>\n

Configure it:<\/div>\n
\n
vim \/etc\/apache2\/mods-enabled\/rpaf.conf<\/div>\n
<IfModule rpaf_module>
\nRPAFenable On
\nRPAFsethostname On
\nRPAFproxy_ips 127.0.0.1 ::1 xxx.xxx.xxx.xxx<\/span>
\nRPAFheader X-Forwarded-For
\n<\/IfModule><\/div>\n<\/blockquote>\n
Where xxx.xxx.xxx.xxx<\/span> is the IP of the reverse proxy.. or just remove it if you use only 127.0.0.1<\/div>\n
<\/div>\n

Install on CentOS:<\/h3>\n

Unlike Ubuntu, in CentOS, mod rpaf has to be compiled from source.<\/p>\n

yum install httpd-devel<\/p><\/blockquote>\n

Download latest version of mod rpaf (0.6 by the time of this post):<\/p>\n

wget\u00a0 http:\/\/mirror.trouble-free.net\/sources\/mod_rpaf-0.6.tar.gz
\ntar zxvf mod_rpaf-0.6.tar.gz
\ncd mod_rpaf-0.6
\napxs -i -c -n mod_rpaf-2.0.so mod_rpaf-2.0.c<\/p><\/blockquote>\n

Modify<\/div>\n
\n
vi \/etc\/httpd\/conf.d\/mod_rpaf.conf<\/div>\n<\/blockquote>\n
and add:<\/div>\n
\n
RPAFenable On
\nRPAFsethostname On
\nRPAFproxy_ips 127.0.0.1 xxx.xxx.xxx.xxx<\/span>
\nRPAFheader X-Forwarded-For<\/div>\n<\/blockquote>\n
Where xxx.xxx.xxx.xxx<\/span> is the IP of the reverse proxy.. or just remove it if you use only 127.0.0.1<\/div>\n
<\/div>\n

Install mod_remoteip for Apache 2.4 and above on CentOS:<\/h2>\n

If you’re using Apache 2.4 or above, you have to use mod_remoteip instead:<\/p>\n

yum install httpd-devel
\nwget https:\/\/svn.apache.org\/repos\/asf\/httpd\/httpd\/trunk\/modules\/metadata\/mod_remoteip.c
\napxs -cia mod_remoteip.c<\/p><\/blockquote>\n

Edit the Apache Configuration file:
\nUsually located in:<\/p>\n

vi \/etc\/httpd\/conf\/httpd.conf<\/p><\/blockquote>\n

Below:<\/p>\n

LoadModule remoteip_module\u00a0\u00a0\u00a0 \/usr\/lib64\/httpd\/modules\/mod_remoteip.so<\/p><\/blockquote>\n

Add:<\/p>\n

RemoteIPHeader X-Forwarded-For
\nRemoteIPInternalProxy\u00a0 127.0.0.1 xxx.xxx.xxx.xxx<\/span>
\nRemoteIPProxiesHeader\u00a0 X-Forwarded-For<\/p><\/blockquote>\n

Where xxx.xxx.xxx.xxx<\/span> is the IP of the reverse proxy.. or just remove it if you use only 127.0.0.1<\/p>\n

If you want to change the IPs that appear in the log file, scroll down a little bit and change the LogFormat from:<\/p>\n

LogFormat “%i %l %u %t “%r” %>s %b “%{Referer}i” “%{User-Agent}i”” combined<\/p><\/blockquote>\n

to<\/p>\n

LogFormat “%a %l %u %t “%r” %>s %b “%{Referer}i” “%{User-Agent}i”” combined<\/p><\/blockquote>\n

Restart Apache<\/h2>\n

(Ubuntu\/Debian)<\/p>\n

service apache2 restart<\/p><\/blockquote>\n

(CentOS)<\/p>\n

service httpd restart<\/p><\/blockquote>\n

Questions? Please leave a comment below!<\/b><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

  By default, varnish doesn’t forward the public IP of the visitor to the web server such as Apache or Nginx. This makes it harder to detect the visitors’ real IP and to read the log files since they will all be displaying the server’s IP. To fix this, Varnish has to be configured to […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[48,17,24,6,7,4,53],"tags":[],"class_list":["post-37","post","type-post","status-publish","format-standard","hentry","category-apache","category-centos","category-debian","category-linux","category-ssh","category-ubuntu","category-varnish"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.tech-and-dev.com\/blog\/wp-json\/wp\/v2\/posts\/37","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.tech-and-dev.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.tech-and-dev.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.tech-and-dev.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.tech-and-dev.com\/blog\/wp-json\/wp\/v2\/comments?post=37"}],"version-history":[{"count":2,"href":"https:\/\/www.tech-and-dev.com\/blog\/wp-json\/wp\/v2\/posts\/37\/revisions"}],"predecessor-version":[{"id":309,"href":"https:\/\/www.tech-and-dev.com\/blog\/wp-json\/wp\/v2\/posts\/37\/revisions\/309"}],"wp:attachment":[{"href":"https:\/\/www.tech-and-dev.com\/blog\/wp-json\/wp\/v2\/media?parent=37"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.tech-and-dev.com\/blog\/wp-json\/wp\/v2\/categories?post=37"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.tech-and-dev.com\/blog\/wp-json\/wp\/v2\/tags?post=37"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}